| Computer Forensics is a science and it is also a | | | | of a file or document. Such as, the date the file was |
| collective word used to describe the work of | | | | created, modified and last accessed. Additional |
| computer forensics investigators who use their skills to | | | | information that could be captured could include the |
| restore formatted, corrupted, deleted or hidden files | | | | original creator of the file information. This depends |
| from computers or other electronic media and | | | | on the original installation of the application as well as |
| identifying crucial data trail, time and dates. They also | | | | anyone who has ever accessed the file. Identifying |
| obtain access to encrypted and protected day by | | | | these requires specialized software - maybe an |
| using specialized software or softwares. | | | | intrusive process. |
| The increased usage of the Internet, for corporate and | | | | The most common applications of computer forensics |
| individual communication, computer forensic | | | | are as follows: |
| investigators are now more equip to analyze emails, | | | | Divorce Cases |
| Internet searches, file transfers, online account | | | | Electronic Investigation |
| transactions and more. | | | | Expert Witness Service |
| There are four main areas when investigating a | | | | Corporate E-mail Investigation |
| potential incident: | | | | Litigation Support |
| - Saved Files - These are files that can be viewed on | | | | Intellectual Property Disputes |
| the computer - Usually a non-intrusive task to obtain | | | | Investigation and Discovery Litigation Programs |
| these files. | | | | Insurance Fraud Cases |
| - Deleted Files - They are either in the 'trash' or require | | | | Corporate Investigations |
| special software to 'capture and restore' the files - | | | | Corporate Counsel Support |
| non-intrusive task to obtain these files. | | | | Electronic Records Management |
| - Temporary Files - Files are typically generated from | | | | This is how Peadofiles other crimes on the similar |
| browsing the Internet, working on a document, some | | | | path get found out and the findings are used against |
| types of back-up software as well as certain | | | | the criminal in the court of law. |
| software installations for example. Identifying these | | | | |
| requires specialized software - intrusive process. | | | | |
| - Meta Data - Typically is associated with the details | | | | . |